Need help with forum I am making

[jeremy78]

I'm making a forum for a game I play. I have almost everything done but the forum part. I cant figure out how to post the text the user inputted to the screen.






Heres the code I have so far:

Code: [Select]

<?php
include "config-post.php";
$titlex = $_POST['title'];
$areax = $_POST['area'];
$bodyx = $_POST['body'];
$title = strip_tags($titlex);
$area = strip_tags($areax);
$body = strip_tags($bodyx);
$time = date('d/m/y h:i:s');
if($area == discussion){
   $query = "INSERT INTO discussion(title, body, time) VALUES ($title, $body, $time)";
   $result = mysql_query($query);
   if($result){
      header("Location: discussion.php");
   }
}
if($area == suggestions){
   $query2 = "INSERT INTO suggestions(title, body, time) VALUES ($title, $body, $time)";
   $result2 = mysql_query($query2);
   if($result2){
      header("Location: suggestions.php");
   }
}
if($area == tips){
   $query3 = "INSERT INTO tips(title, body, time) VALUES ($title, $body, $time)";
   $result3 = mysql_query($query3);
   if($result3){
      header("Location: tips.php");
   }
}
if($area == bugs){
   $query4 = "INSERT INTO bugs(title, body, time) VALUES ($title, $body, $time)";
   $result4 = mysql_query($query4);
   if($result4){
      header("Location: bugs.php");
   }
}
if($area == war_discussion){
   $query5 = "INSERT INTO war discussion(title, body, time) VALUES ($title, $body, $time)";
   $result5 = mysql_query($query5);
   if($result){
      header("Location: war.php");
   }
}
?>

[relax]

dont realy understand what your asking for tbh

but to make the code easier i beleve you can do this insted

Code: (PHP) [Select]

function cleanQuery($string)
{
  if(get_magic_quotes_gpc())
  {
    $string = stripslashes($string);
  }
  if (phpversion() >= '4.3.0')
  {
    $string = mysql_real_escape_string($string);
  }
  else
  {
    $string = mysql_escape_string($string);
  }
  return $string; 
}

$area = cleanQuery($area);

if($area == war_discussion || $area == suggestions || $area == tips){ //fill all the categoris
   $query5 = "INSERT INTO ".$area."(title, body, time) VALUES ($title, $body, $time)";
   $result5 = mysql_query($query5);
   if($result){
      header("Location: ".$area.".php");
   }
}
to read the input use mysql select, on the redirection you can use an id...

please provide more info about whats wrong

edit:
is the error that you have empty $_POST[] check that

and yeah you will ofc need the connection

Code: (PHP) [Select]

$con = mysql_connect("localhost", "root", "pass") or die(mysql_error());
    mysql_select_db("forum") or die(mysql_error());
    mysql_query(insert whatever) or die(mysql_error());
    mysql_close($con);

[jeremy78]

dont realy understand what your asking for tbh

but to make the code easier i beleve you can do this insted

Code: (PHP) [Select]

function cleanQuery($string)
{
  if(get_magic_quotes_gpc())
  {
    $string = stripslashes($string);
  }
  if (phpversion() >= '4.3.0')
  {
    $string = mysql_real_escape_string($string);
  }
  else
  {
    $string = mysql_escape_string($string);
  }
  return $string; 
}

$area = cleanQuery($area);

if($area == war_discussion || $area == suggestions || $area == tips){ //fill all the categoris
   $query5 = "INSERT INTO ".$area."(title, body, time) VALUES ($title, $body, $time)";
   $result5 = mysql_query($query5);
   if($result){
      header("Location: ".$area.".php");
   }
}
to read the input use mysql select, on the redirection you can use an id...

please provide more info about whats wrong

edit:
is the error that you have empty $_POST[] check that

and yeah you will ofc need the connection

Code: (PHP) [Select]

$con = mysql_connect("localhost", "root", "pass") or die(mysql_error());
    mysql_select_db("forum") or die(mysql_error());
    mysql_query(insert whatever) or die(mysql_error());
    mysql_close($con);

Thanks but I was talking about when you input the text into the form it gets sent to the database and then it gets put on the website so everyone can see it but I cant figure out how to display the text to the screen so everyone can see it.

[relax]

Code: (PHP) [Select]

$result = mysql_query("SELECT * FROM posts");
 
 while($row = mysql_fetch_array($result))
   {
   echo $row['name'];
   }

[jeremy78]

Code: (PHP) [Select]

$result = mysql_query("SELECT * FROM posts");
 
 while($row = mysql_fetch_array($result))
   {
   echo $row['name'];
   }

Thanks

[iTpHo3NiX]

+1 for building your own forum and not a script such as SMF, phpBB, vBulletin, or IPB

[lucid]

Yeah gotta make sure to echo 

[ande]

There are a lot of bugs/wrong things here. Here are a few:

- You should use one table for all forum topics and posts
- You cannot have spaces in your table names
- You should look into OOP
- You should make the arena/category/board stuff dynamically loaded from database
- You should split things into more files
- Always do input validation. SQL escape stuff, RFI, LFI, XSS and CSRF are the big problems.

[jeremy78]

There are a lot of bugs/wrong things here. Here are a few:

- You should use one table for all forum topics and posts
- You cannot have spaces in your table names
- You should look into OOP
- You should make the arena/category/board stuff dynamically loaded from database
- You should split things into more files
- Always do input validation. SQL escape stuff, RFI, LFI, XSS and CSRF are the big problems.

Yeah I know I need to make it more secure I am working on that now.

[Uriah]

May I ask what game your making the forum for?

[jeremy78]

May I ask what game your making the forum for?

Yeah I'm making it for a game called kings empire. Its an app. Right now its only for apple devices but I'm pretty sure they making an android version.

[relax]

Yeah I'm making it for a game called kings empire. Its an app. Right now its only for apple devices but I'm pretty sure they making an android version.

OMG your a apple user >.<

[hanorotu]

Why re-invent the wheel when there are more than capable enough and highly customizable forum suites available for free?

[lucid]

Why re-invent the wheel when there are more than capable enough and highly customizable forum suites available for free?

Because it's a great learning experience and there's a greater feeling of achievement.

[jeremy78]

OMG your a apple user >.<

Yeah but I will say that androids are way better for most things.